https://cognitum.one #links

Telegram does not need to have its message encryption broken for users to be tracked at the network layer.

Telegram sends MTProto over unencrypted TCP, exposing auth_key_id - a long-lived identifier tied to the client’s authorisation key. An ISP, hotel WiFi operator, mobile carrier, transit provider, or surveillance system on the network path can see that identifier if they can observe the traffic. It can remain stable across app restarts, IP changes, VPN use, network switches, and location changes.

Secret Chats protect message content, but this leak is below that layer. That makes the attack passive.

The risk is in retroactive correlation. Think a journalist using Telegram from different networks for months, then joining hotel or corporate WiFi under a real name.

That one identity anchor could make old logs searchable for the same auth_key_id.

The fix is simple - mandatory transport encryption for all MTProto connections, with no unencrypted fallback. Telegram chose not to do this.

Source: @kaepora symbolic.software/pdf/gnmx-01.pdf

P.s.: Long life, global passive observer

Awesome and memorable! Black and dirty smm in action.

Did you prepare yourself for it?

Following a NYT report that the US and Israel discussed a potential post-war role for Mahmoud Ahmadinejad, some Iranian hardliners began accusing the former president of being an Israeli asset, despite no public evidence supporting the claim.

(Source: https://www.nytimes.com/2026/05/19/us/politics/iran-israel-us-leader-ahmadinejad.html)

MTONGA? Steps? Great again?

Someone airdropped undeletable NFTs to each TON wallet that made a transfer. The NFTs contain NSFW content; when you try to delete them, they burn and immediately recreate with a new NSFW picture.

The NFTs contain a link to @nft_burn as a removing solution.

Users who followed instructions from @nft_burn should pass a verification check through sign-in using their Telegram account. That account would then be drained.

I tried to report @nft_burn three times to different people. The last time, I got a reply that moderators already knew about the problem.

So, for three weeks, @nft_burn has still been available, and as I understand it, continues draining and stealing Telegram accounts.

MTONGA? They do not give a fuck about users' problems until you do not have tits.

MTONGA? What about spam on Telegram?

If you try to create a chat on Telegram with two or more participants and share a public link to it, bots will find it after a while and you’ll end up having to delete dozens of spam messages every day.

This doesn’t happen on Instagram, Twitter, Facebook or VK.

Creating small groups on Telegram for local purposes isn’t practical or sensible.

P.S.: @nft_burn is still online

When the owners of @solana lost it and it was snatched up by bots reserving free tags, it was blocked in less than a day, over the weekend. It could have been quicker, but it happened at night.

Russian roofers face up to 20 years in prison in the U.S.

Angelina Nikolaou and Ivan Birskus have been charged with eight counts following their climb up the Empire State Building. They are accused of endangering lives, burglary, intentional property damage, unlawful entry, tampering with equipment, possession of burglary tools, disturbing the peace, and violating local law.

Combined, these charges could result in up to 20 years in prison. In addition, prosecutors claim that the roofers caused $1,500 in property damage. The couple denies the charges.

–––––

Would it be possible to see the same news about Jewish roofers? I think they wouldn't have mentioned the nation in that case. Is it racism? Or do I not understand something?

Many windows to go to prison when you aren't a US politician. 🫠